Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity GeoServer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-21621) CVE-2025-21621 CWE-707 CWE-707 Medium GeoServer Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-7227) CVE-2008-7227 CWE-119 CWE-119 Medium GeoServer Missing Authorization Vulnerability (CVE-2025-27505) CVE-2025-27505 CWE-862 CWE-862 Medium GeoServer Other Vulnerability (CVE-2024-23634) CVE-2024-23634 Medium GeoServer Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-40625) CVE-2024-40625 CWE-918 CWE-918 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-40214) CVE-2021-40214 CWE-707 CWE-707 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-40492) CVE-2021-40492 CWE-707 CWE-707 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-22868) CVE-2022-22868 CWE-707 CWE-707 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23871) CVE-2022-23871 CWE-707 CWE-707 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-34599) CVE-2023-34599 CWE-707 CWE-707 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45879) CVE-2023-45879 CWE-707 CWE-707 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45881) CVE-2023-45881 CWE-707 CWE-707 Medium GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34831) CVE-2024-34831 CWE-707 CWE-707 Medium Gitlab CI Lint SSRF CWE-918 CWE-918 Medium Gitlab open user registration CWE-200 CWE-200 Medium GlassFish CVE-2010-4438 Vulnerability (CVE-2010-4438) CVE-2010-4438 Medium GlassFish CVE-2012-0104 Vulnerability (CVE-2012-0104) CVE-2012-0104 Medium GlassFish CVE-2012-0550 Vulnerability (CVE-2012-0550) CVE-2012-0550 Medium GlassFish CVE-2012-0551 Vulnerability (CVE-2012-0551) CVE-2012-0551 Medium GlassFish CVE-2012-3155 Vulnerability (CVE-2012-3155) CVE-2012-3155 Medium GlassFish CVE-2013-1508 Vulnerability (CVE-2013-1508) CVE-2013-1508 Medium GlassFish CVE-2016-3608 Vulnerability (CVE-2016-3608) CVE-2016-3608 Medium GlassFish CVE-2016-5477 Vulnerability (CVE-2016-5477) CVE-2016-5477 Medium GlassFish CVE-2017-3247 Vulnerability (CVE-2017-3247) CVE-2017-3247 Medium GlassFish CVE-2017-10385 Vulnerability (CVE-2017-10385) CVE-2017-10385 Medium GlassFish CVE-2017-10393 Vulnerability (CVE-2017-10393) CVE-2017-10393 Medium GlassFish CVE-2017-10400 Vulnerability (CVE-2017-10400) CVE-2017-10400 Medium GlassFish CVE-2018-3210 Vulnerability (CVE-2018-3210) CVE-2018-3210 Medium GlassFish Improper Input Validation Vulnerability (CVE-2011-5035) CVE-2011-5035 CWE-20 CWE-20 Medium GlassFish Improper Input Validation Vulnerability (CVE-2015-3237) CVE-2015-3237 CWE-20 CWE-20 Medium GlassFish Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2751) CVE-2008-2751 CWE-707 CWE-707 Medium GlassFish Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5266) CVE-2008-5266 CWE-707 CWE-707 Medium GlassFish Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1553) CVE-2009-1553 CWE-707 CWE-707 Medium GlassFish Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3314) CVE-2021-3314 CWE-707 CWE-707 Medium GlassFish Observable Discrepancy Vulnerability (CVE-2013-1620) CVE-2013-1620 CWE-203 CWE-203 Medium Global.asa backup file found CWE-538 CWE-538 Medium Golang runtime profiling data CWE-200 CWE-200 Medium Go web application binary disclosure CWE-540 CWE-540 Medium Grafana Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-28376) CVE-2026-28376 CWE-770 CWE-770 Medium Grafana Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-28383) CVE-2026-28383 CWE-770 CWE-770 Medium Grafana Authentication Bypass by Spoofing Vulnerability (CVE-2022-35957) CVE-2022-35957 CWE-290 CWE-290 Medium Grafana Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-12458) CVE-2020-12458 CWE-312 CWE-312 Medium Grafana Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-28379) CVE-2026-28379 CWE-362 CWE-362 Medium Grafana CVE-2022-39307 Vulnerability (CVE-2022-39307) CVE-2022-39307 Medium Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19039) CVE-2018-19039 CWE-200 CWE-200 Medium Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-19499) CVE-2019-19499 CWE-200 CWE-200 Medium Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-12459) CVE-2020-12459 CWE-200 CWE-200 Medium Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-21673) CVE-2022-21673 CWE-200 CWE-200 Medium Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-12141) CVE-2025-12141 CWE-200 CWE-200 Medium Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-21722) CVE-2026-21722 CWE-200 CWE-200 Medium Grafana Files or Directories Accessible to External Parties Vulnerability (CVE-2026-33380) CVE-2026-33380 CWE-552 CWE-552 Medium Grafana Improper Access Control Vulnerability (CVE-2026-28374) CVE-2026-28374 CWE-284 CWE-284 Medium Grafana Improper Authentication Vulnerability (CVE-2022-39229) CVE-2022-39229 CWE-287 CWE-287 Medium Grafana Improper Authorization Vulnerability (CVE-2026-21724) CVE-2026-21724 CWE-285 CWE-285 Medium Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-43813) CVE-2021-43813 CWE-22 CWE-22 Medium Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-43815) CVE-2021-43815 CWE-22 CWE-22 Medium Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-10601) CVE-2026-10601 CWE-22 CWE-22 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-12099) CVE-2018-12099 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-18623) CVE-2018-18623 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-18624) CVE-2018-18624 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-18625) CVE-2018-18625 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1000816) CVE-2018-1000816 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-13068) CVE-2019-13068 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11110) CVE-2020-11110 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12052) CVE-2020-12052 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12245) CVE-2020-12245 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13430) CVE-2020-13430 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24303) CVE-2020-24303 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41174) CVE-2021-41174 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-21702) CVE-2022-21702 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23552) CVE-2022-23552 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31097) CVE-2022-31097 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0507) CVE-2023-0507 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0594) CVE-2023-0594 CWE-707 CWE-707 Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1410) CVE-2023-1410 CWE-707 CWE-707 Medium 1...21222324...121 22 / 121
